Last updated: August 7, 2026
Your photos are never stored on our servers. When you upload a photo for restoration, it is:
We do not save, store, log, or share your images in any way.
When you create an account (optional), we collect your email address, your name, and the account identifier supplied by the sign-in method you choose (for example, the Google account identifier when you sign in with Google). Authentication is handled by a self-hosted instance of Stack Auth, an open-source authentication system that we run on our own infrastructure. Your account details and sign-in sessions are stored in our own database on our own servers; no third-party authentication provider receives them. This data is used to manage your account, track usage limits, and process credit purchases.
Payment processing is handled by Dodo Payments. We never see or store your payment card details. We only receive confirmation of successful payments and credit purchase status.
We use cookies and similar technologies to improve your experience on PhotoFlip.
_fbp cookie and tracks you across sites, and Meta may use it to build an advertising profile and to show you ads for PhotoFlip elsewhere. Google Tag Manager separately injects our Google Ads conversion and remarketing tags, which store a click identifier (_gcl_ls) so a purchase can be attributed to an ad click.cw_conversation cookie.We do not use your uploaded photos for analytics or session replay. These tools run under legitimate interest: declining the cookie banner does not switch them off, and we do not currently act on Do Not Track or Global Privacy Control signals. You can block the cookies and scripts through your browser settings, or contact us and we will delete your data.
Authentication (Stack Auth), product analytics and session replay (PostHog and OpenPanel), error monitoring and error-session replay (GlitchTip), and live chat (Chatwoot) are not third parties: each is open-source software that we run on infrastructure we operate ourselves, so the data they handle stays on our servers and is not transmitted to an outside provider. The Meta Pixel is the exception among our measurement tags: it sends data to Meta, a third party we do not control.
Account data is retained as long as your account is active. You can request deletion of your account and all associated data by contacting us.
For privacy inquiries, contact us at our contact page.